Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 17:43:24 +0000 certfr-2026-avi-1294 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… https://db.gcve.eu/vuln/certfr-2026-avi-1294 certfr-2026-avi-1294 https://db.gcve.eu/vuln/certfr-2026-avi-1294 fkie_cve-2026-16301 https://db.gcve.eu/vuln/fkie_cve-2026-16301 <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without authorization due to improper authorization checks in the downstream pipeline creation service.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without authorization due to improper authorization checks in the downstream pipeline creation service.</p> https://db.gcve.eu/vuln/fkie_cve-2026-16301 GHSA-4jhf-7f73-gc68 https://db.gcve.eu/vuln/ghsa-4jhf-7f73-gc68 <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without authorization due to improper authorization checks in the downstream pipeline creation service.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without authorization due to improper authorization checks in the downstream pipeline creation service.</p> https://db.gcve.eu/vuln/ghsa-4jhf-7f73-gc68 NCSC-2026-0414 — Kwetsbaarheden verholpen in GitLab https://db.gcve.eu/vuln/ncsc-2026-0414 NCSC-2026-0414 https://db.gcve.eu/vuln/ncsc-2026-0414